Security & Compliance Analyst

Role overview Help customers and prospects understand and assess an organization’s security program. You’ll manage security questionnaires, maintain clear customer-facing materials, and coordinate ongoing compliance activities with auditors and internal control owners. The role is remote within Mexico, with occasional travel to Guadalajara.

Responsibilities - Triage, complete, and track customer and prospect security questionnaires, using approved answers and automation to improve speed and consistency. - Maintain a public trust portal and reusable materials such as security overviews, FAQs, one-pagers, and data flow documentation. - Coordinate evidence gathering with auditors and internal control owners for ISO 27001, SOC 2, GDPR, and other applicable requirements. - Keep access reviews, policy updates, control audits, risk tracking, and security awareness materials on schedule. - Join customer-facing security discussions and explain documented practices clearly and accurately. - Identify recurring information gaps and improve the underlying documentation or process.

Requirements - At least three years of experience in information security, GRC, compliance, or a related field, including security questionnaires or a questionnaire management process. - Working knowledge of ISO 27001, SOC 2 Trust Services Criteria, GDPR, and common security standards. - Strong writing skills, including the ability to explain security topics in accessible language. - Experience maintaining documentation, knowledge bases, or content libraries. - Comfort supporting customer calls and collaborating with auditors, control owners, and sales teams. - Careful organization and discretion when handling sensitive information.

Nice to have - Experience with questionnaire automation or compliance platforms such as Conveyor, Vanta, or Drata. - Experience coordinating audit evidence for ISO 27001 or SOC 2; a CISA or similar certification.

Benefits and work setup - Remote work from within Mexico; candidates should be able to travel to Guadalajara when needed. - The employer describes a benefits program covering physical, mental, and financial well-being, though specific coverage details are not provided.